Biz Security Level

Basic
Firewall, Spam Filter, Backup (AV if not Windows)

Mid
Patch Mgt, Web Filter, Monitoring, Password managers, MFA on email + Cloud, Users are not local Admin

Bronze
EDR, VPN, Scheduled Vulnerability Scanning, Physical Security review

Silver
Training, Phishing, Quick Vulnerabilty Test, Network Segmentation, MFA everywhere

Gold
Supply Chain Resiliancy Review, OSInt review, HDD encryption on Laptops

Platinum
Darkweb monitoring, HDD encryption on all, DLP, Compliance, Change Mgt, Defense in Depth, Mobile MDR, Pen testing, UBA